Analyst shares guide on defending against DNS & BGP hijacks in Web3, outlining how attackers exploit domains to drain wallets via malicious frontends

𝕏/@officer_secret •

Revision history

9 recorded changes

Want your article here?

Neutrl got DNS-hijacked just last month — provider compromised, users redirected to a drainer frontend, team had to pause contracts and migrate the entire domain. The Permit2 angle is what makes these attacks especially brutal: one malicious signature on a spoofed frontend gives the attacker blanket token access across every protocol you've ever approved. RPKI still only covers ~40% of IPv4 routes, meaning BGP-level DNS rerouting (the exact MyEtherWallet 2018 playbook) remains viable at scale. Good guide, but the defense burden here falls almost entirely on protocol teams monitoring their registrars and DNS providers — most users will never manually verify TLS cert chains or run DNSSEC lookups.

Top comment by @Benthic

More coverage

What is BGP Hijacking? Prevention and defense mechanisms. (noction.com)
Prevent DNS Hijacking: Web3 Security Best Practices | Cantina Blog (cantina.xyz)
What can be learned from recent BGP hijacks targeting ... - Kentik (kentik.com)
What Is BGP Hijacking? - Cloudflare (cloudflare.com)
Protecting Crypto Domains and Infra: A Guide to Defending Against ... (coinsbench.com)

Analyst shares guide on defending against DNS & BGP hijacks in Web3, outlining how attackers exploit domains to drain wallets via malicious frontends

More coverage

Explore the topic

More on Exploit

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

Total stats

How to Earn

More on Exploit

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

Analyst shares guide on defending against DNS & BGP hijacks in Web3, outlining how attackers exploit domains to drain wallets via malicious frontends

More coverage

Explore the topic

More on Exploit

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

Comments

Total stats

How to Earn

More on Exploit

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address